Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: F+jeidY0RRRMCBU6cioGtrVWhGLlSQV458geoj5HbXU=
Subject key identifier: 44:EC:EB:39:99:8E:CD:47:E9:55:7C:59:69:83:77:B2:C5:D4:7D:4B
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 019D9CD1244AA408544526405A7C1376B259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0AD2
Signing time: Fri 17 Apr 2026 19:00:45 +0000
Manifest this update: Fri 17 Apr 2026 19:00:45 +0000
Manifest next update: Sat 18 Apr 2026 19:00:45 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: hU6/JzwkCJD6dEQ4JavVc+0n3+rak7JPkpoXs4urVmM=)
3: YUvYfLIz9Os3TS_5BCkoO47Tc7w.asa (hash: ecIQbMb7coA3jYnuN9HJXpp9aBbglIqzOo2LBtLMzps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:24:4a:a4:08:54:45:26:40:5a:7c:13:76:b2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Apr 17 19:00:45 2026 GMT
Not After : Apr 18 19:00:45 2026 GMT
Subject: CN=44eceb39998ecd47e9557c59698377b2c5d47d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:df:d7:06:47:f5:f5:93:8d:52:f5:f8:b4:
b9:72:13:c8:2a:f1:66:a9:43:23:56:18:c8:84:86:
eb:0b:6a:c2:18:85:cf:97:4d:2f:35:42:5c:03:ca:
56:0e:a7:67:94:65:79:ba:7e:d9:5d:d9:8a:36:1c:
ea:1d:44:a2:fc:50:ab:d7:ce:00:e5:47:d9:5d:2f:
a3:89:1c:b2:d1:65:84:5e:93:36:c1:dc:b0:82:91:
99:2b:f7:65:3d:25:d6:b9:96:c9:14:ec:9e:9d:eb:
97:92:80:d0:2f:2e:99:22:8d:b7:1c:f4:d8:f7:e6:
5d:c2:1e:bf:43:63:cb:19:01:de:ea:84:5f:1b:11:
1b:4a:9b:dc:03:bb:28:a1:cb:eb:0c:82:94:0b:16:
24:bc:74:15:4b:e7:33:f6:69:e4:52:41:0c:e7:01:
73:94:61:d2:d3:65:5b:b8:5b:0e:2f:2e:59:9a:42:
c8:38:14:1a:05:41:cf:ae:71:c4:89:62:30:8e:1a:
a7:c1:1a:a2:f2:af:6e:6c:f5:b0:7e:b0:f7:17:02:
eb:fc:91:b4:3e:24:92:af:b4:15:d7:6a:f5:d6:73:
0c:69:17:8c:16:1f:5d:61:78:7c:00:c9:ef:7a:12:
3e:f8:35:84:fd:66:b8:27:ef:6d:e7:2e:08:c4:d8:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:EB:39:99:8E:CD:47:E9:55:7C:59:69:83:77:B2:C5:D4:7D:4B
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d4:bf:41:d8:02:17:7b:d2:2e:21:57:01:69:e2:52:21:8f:
cd:31:7b:4d:a4:d6:63:cd:5d:6d:11:66:7e:f0:1e:18:30:f8:
3f:0c:42:9f:93:03:f8:e2:ad:be:5c:f1:37:4b:0f:e3:11:8b:
17:18:f5:27:01:36:2b:66:08:e4:1e:89:af:ae:24:b4:13:29:
ee:27:28:df:92:9f:a0:cb:b9:0a:c7:de:7c:5f:b7:ae:b8:dd:
ba:20:49:12:7e:99:ae:6e:8d:80:f5:2c:ac:e0:26:b1:6c:13:
28:28:43:60:67:58:49:60:9c:c4:1b:76:a2:90:48:2b:3d:0e:
c4:27:ae:a0:ea:02:75:dc:cb:91:a7:55:8f:fd:16:a9:a4:86:
cc:03:0a:88:44:45:3f:af:37:e0:8f:42:b2:41:8c:ee:f5:85:
36:cf:47:f7:67:33:ef:2d:b1:07:20:50:07:7f:5f:47:f5:c8:
cf:1f:7e:7b:d8:b2:73:17:bd:8e:48:a1:0a:14:a8:91:89:ef:
42:0d:e7:a5:94:7f:62:db:64:36:12:c0:cf:37:e9:1f:af:0a:
0b:54:4d:0d:88:16:b2:37:47:aa:a4:96:40:6e:a7:c3:8f:e3:
ab:93:8e:73:e7:91:92:81:09:e5:e2:04:7b:4a:63:99:ac:34:
71:6b:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:02 2026 by rpki-client